Add TODO.
Fix the "down" test.
Add fledgling POST support.

This is very much a work in progress, and probably needs a couple of
design iterations - but it allows to do simple form logins.
Fix requests usage bug: cookies were not sent.